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SMART CARD FOR ACCESSING A TARGET INTERNET SITE 

Li da Nobakht 
James R.W. Clymer 

RELATED APPLICATIONS 

[0001] The present invention is a continuation-in-part of 
U.S. Patent Application Serial Nos. 09/491,681 entitled 
"Channel -Based Internet Network", 09/491,458 entitled "User 
Terminal For Channel -Based Internet Network" and 09/4 91,43 6 
entitled "System Server For Channel-Based Internet Network", 
each of which is incorporated by reference in its entirety. 

FIELD OF THE INVENTION 

[0002] The present invention relates to 

telecommunications, and more particularly to networks and 
systems used to access the Internet. 

RELATED ART 

[0003] The Internet is a modern communication system that 
allows computer operators (users) to network with other 
operators as well as a variety of Internet databases 
(sites) . These Internet sites often provide useful 
information, such as news and weather information, or offer 
products or services that can be purchased by users using, 
for example, credit card numbers. Many vendors have 
established an Internet site with the desire that many users 
access the site and purchase products or services from the 
vendors through the site. However, vendors typically face 
significant hurdles in attracting users to their Internet 
sites . 

[0004] First, a prospective user must purchase an 
expensive personal computer and appropriate software. Next, 
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the prospective user must establish an account with an 
Internet access provider or on-line service provider such as 
America Online. The prospective user must master the 
operating system of the personal computer to establish 
access to the Internet. 

[0005] After establishing access to the Internet, the 
user must memorize and enter a long and confusing uniform 
resource locator (URL) associated with the vendor's Internet 
site. In order for this to occur, the user must be made 
aware of the URL. This typically requires the vendor to 
spend a significant amount of money advertising the URL 
associated with the Internet site. This advertising is 
typically in the form of television, radio or on-line 
advertisements . 

[0006] It would therefore be desirable to have a more 
efficient and direct method for enabling vendors to attract 
users to their Internet sites. 

SUMMARY 

[0007] The present invention is directed to an Internet 
network that includes a system server, a user terminal 
having a smart card interface, and a target Internet site, 
all coupled to the Internet. 

[0008] A system server is established for a plurality of 
authorized users. Each of the authorized users accesses the 
Internet with support from the system server through a user 
terminal . The system server maintains a server database 
that stores authorized user information corresponding with 
each of the authorized users. For example, the server 
database may store a customer number and personal ID number 
for each of the authorized users. 

[0009] In a particular embodiment, an owner of the target 
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Internet site would like to provide target information to 
one or more of the authorized users. For example, the 
target information may take the form of a web page that is 
accessed from the target Internet site in response to a 
target URL. The owner of the target Internet site provides 
payment to the owner of the system server to obtain the 
ability to provide the target information to the authorized 
users. In return, the owner of the system server has smart 
cards programmed and sent to the authorized users. Each of 
these smart cards is programmed to store the authorized user 
information of a corresponding authorized user and the 
target URL specified by the owner of the target Internet 
site. Each of the smart cards is sent (e.g., mailed) to the 
corresponding authorized user. When an authorized user 
inserts his or her smart card into a user terminal, the user 
terminal retrieves the authorized user information from the 
smart card, and transmits this information to the system 
server via the Internet. The system server compares the 
authorized user information received from the user terminal 
with the authorized user information stored in the server 
database. If a match exists, the system server transmits an 
authorization code to the user terminal. In response to the 
authorization code, the user terminal retrieves the target 
URL from the smart card, and uses the target URL to access 
the target Internet site. In response, the target Internet 
site provides the target information to the user terminal. 
[0010] As a result, the target Internet site is able to 
provide target information to the authorized users, without 
having to advertise the URL associated with the target 
information. By requiring the authorization code to access 
the target URL, the owner of the system server prevents the 
owner of the target Internet site from simply creating its 
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own smart cards to avoid payment to the owner of the system 
server . 

[0011] In another embodiment, the owner of the system 
server may collect personal information from the authorized 
users (e.g., age, gender, income level, and hobbies). The 
owner of the system server can then provide smart cards to a 
selected subset of the authorized users. For example, the 
owner of the system server could provide smart cards that 
provide information on automobiles only to those authorized 
users old enough to drive, or provide information on golf 
clubs only to those authorized users that list golf as a 
hobby. As a result, the owner of the target Internet site 
is able to provide the target information to a desirable 
audience . 

[0012] The present invention will be more fully 
understood in view of the following description and 
drawings . 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0013] Fig. 1 is a block diagram showing a portion of an 
Internet network in accordance with one embodiment of the 
present invention; 

[0014] Fig. 2 is a block diagram showing the user 
terminal of the Internet network of Fig. 1 in accordance 
with one embodiment of the present invention; 
[0015] Fig. 3 is a block diagram of a smart card 
associated with the user terminal shown in Fig. 2; 
[0016] Fig. 4 is a block diagram of an asset manager 
flash associated with the user terminal shown in Fig. 2; 
[0017] Fig. 5 is a diagram depicting the data stored in a 
network database of the system server in accordance with a 
simplified embodiment of the present invention; 
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[0018] Fig. 6 is a diagram illustrating the flow of 
information between a system server, a target Internet site, 
and a smart card producer in accordance with one embodiment 
of the present invention; and 

[0019] Figs. 7 and 8 are flow diagrams illustrating the 
operation of a user terminal, a system server and a target 
Internet site after the user receives a smart card produced 
in the flow of Fig. 6. 

DETAILED DESCRIPTION 

[0020] Fig. 1 shows a portion of an Internet network 100 
according to one embodiment of the present invention. 
Internet network 100 includes a system server 110, Internet 
site 12 0 7 and user terminal 13 0. System server 110 includes 
input terminal 401, network database 416 and CPU 412. User 
terminal 130 includes set-top box 131, video display 132 and 
input device 133. System server 110, Internet site 120 and 
user terminal 13 0 are connected to the Internet using known 
communication hardware and methods. These elements are 
described in more detail in commonly owned, co-pending U.S. 
Patent Application Serial Nos. 09/491,681 entitled "Channel- 
Based Internet Network 11 , 0 9/491,458 entitled "User Terminal 
For Channel -Based Internet Network" and 0 9/4 91,43 6 entitled 
"System Server For Channel -Based Internet Network", each of 
which is incorporated by reference in its entirety. 
[0021] The present invention provides an additional 
application for the networks described in U.S. Patent 
Application Serial Nos. 09/491,681, 09/491,458 and 
09/491,436. In accordance with one embodiment, the 
additional application provided to Internet network 100 can 
be generally described as follows. The owner of target 
Internet site 120 is an entity, such as a merchant, who 
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would like to display target information, such as an 
advertisement, to the owner of user terminal 130 in the form 
of a web page. To facilitate this, the owner of system 
server 110 provides a smart card 232 to the owner of user 
terminal 13 0 in exchange for payment from the owner of 
target Internet site 120. Smart card 232 is programmed to 
store authorized user information identifying the owner of 
user terminal 13 0, and a predetermined URL, which is 
specified by the owner of target Internet site 120. 
[0022] When the owner of user terminal 130 inserts smart 
card 232 into smart card slot 215 of set-top box 131, an 
initialization process is started. During this process, 
set -top box 131 retrieves the authorized user information 
stored on smart card 232, and transmits this information to 
system server 110. If system server 110 determines that the 
user authorization information is valid, then system server 
110 transmits an authorization code to set-top box 131. In 
response to the authorization code, set -top box 131 
retrieves the target URL stored on smart card 232. (Set-top 
box 131 is not able to retrieve the target URL without the 
authorization code.) Set-top box uses the retrieved target 
URL to access the target Internet site. In response, target 
Internet site 12 0 transmits the target information (i.e., a 
web page) to set-top box 131. Set-top box 131, in turn, 
displays the downloaded target information on video display 
132. In this manner, the target information is 
automatically provided to user terminal 13 0 without the user 
having to know or enter the target URL associated with the 
target Internet site. 

[0023] The operation of network 100 will now be described 
in more detail . 

[0024] Fig. 2 is a block diagram showing user terminal 
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13 0 in accordance with one embodiment of the present 
invention. In the embodiment shown in Fig. 2, input device 
133 can be a remote control 202 and/or a wireless keyboard 
203 . 

[0025] Set-top box 131 includes central processing unit 
(CPU) 210, system controller 211, micro-controller unit 
(MCU) 212, IR receiver 213, interrupt switch 214, smart card 
socket 215, communications port socket 216, communication 
port 217, synchronous dynamic random access memory (SDRAM) 
218, dedicated flash memory 219, compact flash socket 220, 
asset manager flash memory 222, display controller 223, 
audio controller 224, speaker 225, internal microphone 22 6, 
external microphone jack 227 and parallel port socket 228. 
The various elements are connected by an internal bus 23 0 as 
illustrated. A compact flash card 231 is selectively 
insertable into compact flash socket 220, and a printer 233 
is selectively connected to parallel port socket 228. In 
addition, a smart card 232 is selectively insertable into 
smart card socket 215. The various elements of set-top box 
131 are described in detail on commonly owned, co-pending 
U.S. Patent Application Serial Nos. 09/491,681, 09/491,458 
and 09/491,436. CPU 210 and system controller 211 support a 
smart card access protocol. Smart card 232 is inserted into 
smart card socket 215, thereby providing a connection 
between smart card 232 and system controller 211. Interrupt 
switch 214 generates an interrupt signal each time that a 
smart card is inserted or removed from smart card socket 
215 . 

[0026] Fig. 3 is a block diagram illustrating smart card 
232 in accordance with one embodiment of the present 
invention. Smart card 232 includes a set of contact pads 
310 that are placed into contact with socket 215 (see Fig. 
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2), and a controller 320 for preventing unauthorized reading 
from and/or writing to a non-volatile memory 330. Non- 
volatile memory 330 stores limited-write data that is 
protected by a write protect fence. 

[0027] The limited-write data, which is located within 
the write protect fence in Fig. 3, includes a customer 
number 331, a personal identification number (user PIN) 332, 
and a target Internet site URL 333. In the described 
embodiment, smart card 232 is inserted in set-top box 131 
after the user has established a connection between set-top 
box 131 and the Internet. This connection can be 
established using a smart card in the manner described in 
U.S. Patent Application Serial Nos . 09/491,681, 09/491,458 
and 09/491,436. In another embodiment, smart card 232 can 
additionally include the information required to establish 
the connection to the Internet. 

[0028] In the described example, customer number 331 is a 
number (e.g., "123456789") that identifies a customer group, 
such as the Doe family, and user PIN 332 is a number (e.g., 
"001") that identifies one member of the customer group, 
such as John Doe. As discussed below, the customer number 
331 and user PIN 332 are associated with a box serial number 
stored in asset manager flash 222. Target Internet site URL 
333 is the Internet address of the site that provides the 
target information. An authorization code is required to 
retrieve target Internet site URL 333 from smart card 232. 
In the described embodiment, the target Internet site URL 
333 is "www. store .com/ specialof f er" . 

[0029] Fig. 4 is a block diagram illustrating an example 
of the data stored in asset manager flash 222. Asset 
manager flash 222 is a non-volatile memory that is 
permanently connected to internal bus 230. Asset manager 
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flash 222 permanently stores information that identifies 
set-top box 131, such as box serial number 342. In the 
described example, the box serial number 342 stored in asset 
manager flash 222 is equal to "00000001". Asset manager 
flash 222 also stores manufacture date 343, current channel 
table version 344, operating system version numbers 346 and 
application software version numbers 347, which are not 
re l evan t to the present invention. The information stored 
in asset manager flash 222 is described in more detail in 
U.S. Patent Application Serial Nos . 09/491,681, 09/491,458 
and 09/491,436. 

[0030] Referring now to Fig. 1, system server 110 
includes an input terminal 401 (e.g., a personal computer or 
workstation), a CPU 412 and a network database 416. The 
hardware components of system server 110, both shown and not 
shown, are conventional and well known to those of ordinary 
skill in the art. Input terminal 401 is used by the owner 
of server 110 to enter user/terminal information into 
network database 416 using known data processing techniques. 
Network database 416 stores user and terminal information 
used to identify and authorize users that request service. 
[0031] Fig. 5 is a diagram depicting the data stored in 
network database 416 in accordance with a simplified 
embodiment of the present invention. Network database 416 
stores user PINs, set- top box serial numbers, user status 
and customer numbers. In the described example, the first 
entry of network database 416 corresponds with user John 
Doe. Thus, the first entry of network database 416 stores 
user PIN "001", box serial number "00000 001" and customer 
number "123456789". User status information is used to 
determine whether a user is currently authorized to access 
the network. The status of the Doe family is "current". 
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However, user "DAN DELAY" is indicated as having an 
"expired" account due to late payment of user fees or 
misconduct. The owner of system server 110 programs network 
database 416 to store information for all users of network 
100. Note that users will typically become registered in 
network database 416 when signing up for the channel -based 
Internet access described in U.S. Patent Application Serial 
Nos. 09/491,681, 09/491,458 and 09/491,436. 
[0032] Fig. 6 is a diagram illustrating the flow of 
information between system server 110, target Internet site 
12 0, and a smart card producer 14 0 in accordance with one 
embodiment of the present invention. 

[0033] First, the owner of target Internet site 120 
provides the desired target Internet site URL (e.g., 
"www.store.com/specialoffer") and an agreed upon payment to 
the owner of system server 110 (Step 610) . In response, the 
owner of system server 110 provides the target Internet site 
URL and authorized user information (e.g., customer number 
and user PIN) for an agreed upon set of one or more users to 
a smart card producer 140 (Step 620) . For each user in the 
agreed upon set, smart card producer 14 0 produces a 
corresponding smart card that stores the target Internet 
site URL, the user's corresponding customer number and the 
user's corresponding user PIN (Step 630). 

[0034] The smart card producer 140 can be the same entity 
as the owner of system server 110, or an entity hired by the 
owner of system server 110. If the smart card producer 140 
is hired by the owner of system server 110, then the owner 
or system server 110 may insist on an agreement that 
prohibits the smart card producer 14 0 from disclosing the 
authorized user information received from the owner of 
system server 110. 
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[0035] The authorized user information provided by the 
owner of system server 110 is an item negotiated with the 
owner of target Internet site 120. For example, the owner 
of target Internet site 12 0 can negotiate to have smart 
cards prepared for all of the authorized users of system 
server 110. Alternatively, the owner of target Internet 
site 120 can negotiate to have smart cards prepared for only 
selected groups of authorized users. For example, the owner 
of target Internet site 120 may specify that smart cards are 
only to be prepared for female users of system server 110 
over the age of 18. The owner of target Internet site 120 
can limit the users receiving smart cards using other 
criteria, including, but not limited to, annual income, 
particular interest groups or geographic location. The 
owner of system server 110 may obtain the various selection 
criteria from the users when the users sign-up for service 
with system server 110. This will typically occur when the 
users sign-up for the channel -based network service 
described in U.S. Patent Application Serial Nos . 09/491,681, 
09/491,458 and 09/491,436. During this sign-up process, the 
user may be provided the option of not receiving smart cards 
from target Internet sites. 

[0036] The programmed smart cards are shipped to the 
selected users (Step 640) . Mote that the owner of system 
server 110 will have received the user's addresses during 
the sign-up process. In the described example, a smart card 
is created for John Doe, which stores customer number 
"123456789" , user PIN "001" and the URL for target Internet 
12 0, namely, u www . store . com/ specialof f er" . 
[0037] Fig. 7 is a flow diagram illustrating the 
operation of user terminal 130, system server 110 and target 
Internet site 12 0 in accordance with one embodiment of the 
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present invention. The user (e.g., John Doe) receives a 
smart card 232 programmed during Step 63 0. Upon receiving 
smart card 232, the user may insert the smart card into the 
smart card socket 215 of set top box 131 (Step 701) . 
Interrupt switch 214 is physically actuated by the insertion 
of smart card 232 in socket 215. As a result, interrupt 
switch 214 transmits an interrupt signal to system 
controller 211, which in turn notifies CPU 210. In 
response, CPU 210 clears previous authorization and channel 
table information stored in SDRAM 218 (Step 702) . CPU 210 
then begins a user authorization process by transmitting a 
network access request to system server 110 using 
communication port 217 (Step 703) . 

[003 8] System server 110 determines that a network access 
has been requested in Step 721. Server 110 responds to the 
network access request transmitted from set -top box 131 by 
performing an authorization check (Step 729). First, server 
110 transmits a request for user and terminal information 
(Step 722) . In response, set -top box 131 retrieves the 
customer number and user PIN from the inserted smart card 
232, and retrieves the box serial number 342 from asset 
manager flash 222, and transmits this information to system 
server 110 (Step 704) . Because the smart card in the 
present example belongs to John Doe, the set-top box 131 
transmits customer number "123456789" and user number "001" 
to system server 110. Because the smart card is inserted 
into John Doe's set-top box 131, a box serial number of 
"00000001" is transmitted to system server 110. 
[0039] System server 110 then determines whether the 
information transmitted during Step 704 corresponds with a 
current customer account (Step 723) . To accomplish this, 
system server 110 compares the customer number, user PIN and 



12 



CTV-001-2P US 



PATENT 



box serial number received from set -top box 131 with the 
contents of network database 416. If the customer account 
is not current (e.g., the customer has not paid required 
periodic fees for access to the network) , or if the box 
serial number of the transmitting set-top box 131 is 
invalid, then system server 110 transmits customer service 
information (Step 727) , which is displayed by the user 
terminal 130 (Step 710) . In one embodiment, the customer 
service information describes the reasons for denying the 
network access request (e.g., delinquent account, 
unauthorized user terminal) . The customer service 
information may also include a telephone number for the 
customer to call if there are any additional questions. As 
described below, the failure of system server 110 to 
transmit an authorization code to set -top box 131 prevents 
the target Internet site URL from being retrieved from smart 
card 232 and written to SDRAM 218, thereby preventing the 
target Internet site 120 from being accessed by user 
terminal 130 . 

[0040] In the present example, system server 110 
determines that the user information (e.g., customer number 
and user PIN) received from set -top box 131 matches the 
first entry of network database 416 (Fig. 4) . From this 
entry of network database 416, system server 110 determines 
that the status of John Doe's account is current. If system 
server 110 identifies a current customer account in Step 
723, then control passes to Step 724, in which server 110 
determines whether the inserted smart card identifies a 
resident user of the terminal requesting service, or a guest 
user (Step 724) . In one embodiment, this determination is 
performed by comparing the box serial number received from 
set -top box 131 with the box serial number stored in network 
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database 416 for the identified customer account. In the 
present example, system server 110 determines that the box 
serial number received from set top box 131 ("00000001") 
matches the box serial number associated with John Doe's 
account in network database 416 ("00000001"). In this case, 
a resident user is detected and processing continues to Step 
726 in which system server 110 transmits a resident user 
authorization code to set-top box 131. 

[0041] If the user is attempting to use his or her smart 
card in another customer's set-top box, then the user will 
be allowed to receive authorization as a guest of the other 
customer's set-top box, as long as the other customer allows 
such guest access. For example, if John Doe has inserted 
his smart card in Dan Delay's set-top box, then the box 
serial number transmitted by the set -top box ("00000002") 
will not match the box serial number associated with John 
Doe's account in network database 416 ("00000001"). In this 
case, system server 110 determines that John Doe is a guest 
user, and processing continues to Step 725, in which system 
server 110 transmits a guest user authorization code to set- 
top box 131. In a variation of the present embodiment, 
system server 110 will not provide guest authorization 
unless the status of the customer account associated with 
set-top box 131 is current. That is, John Doe would not 
receive a guest authorization code because Dan Delay's user 
status has expired. 

[0042] Returning to the right side of Fig. 7, after set- 
top box 131 transmits the customer number, user PIN and box 
serial number to server 110 in Step 704, set-top box 131 
waits to receive an authorization code from server 110. In 
one embodiment, if a guest authorization code is received 
from system server 110, set-top box 131 determines whether 
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guests are authorized (Step 705) . This determination 
process involves checking pre-set flags or information 
controlled by the owner of set-top box 131, thereby allowing 
the owner to deny access to guest users. In other 
embodiments, the guest authorization determination process 
can be performed before the network access request (Step 
703) . If guests are not authorized in set-top box 131 (NO 
branch from Step 705) , then system server 110 provides 
customer service information to the user (Steps 72 7 and 
710) . 

[0043] If guests are authorized (YES branch from Step 
705) , or if a resident user authorization code is received 
from server 110 (Step 726) , then set-top box 131 completes 
the initialization process by using the authorization code 
to retrieve the target Internet site URL 333 from smart card 
232, and loading this URL 333 into SDRAM 218 (Step 706) . 
CPU 210 then accesses the target Internet site URL 333 
(e.g., "www.store.com/specialoffer") using the target 
Internet site URL 333. (Steps 707, 731). 

[0044] In response, target Internet site 120 transmits 
the target information to user terminal 13 0 on the Internet 
(Step 732) . User terminal 130 receives and displays the 
target information received from target Internet site 12 0 
(Step 708) . The target information may include a reference 
to the target Internet site URL 333 (i.e., tell the user 
that the Internet site being accessed has a URL of 
" www. store . com/specialof f er" ) . The target information may 
also include links to other Internet sites, which may be 
accessed by the user through input device 133 (Step 709) . 
[0045] The user removes smart card 232 when the session 
is completed. The physical removal of smart card 232 again 
actuates interrupt switch 214, thereby transmitting an 
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interrupt signal to CPU 210 via system controller 211. In 
one embodiment, CPU 210 erases the target Internet site URL 
333 from SDRAM 218 upon removal of smart card 232. 
[0046] In the foregoing manner, target Internet site 120 
is able to provide the target information to the user, 
without having to advertise the target Internet site. The 
owner of system server 110 is able to derive income by 
providing the smart cards to the user for target Internet 
site 120. The user advantageously gains access to the 
target information without having to learn or remember the 
address of the target Internet site. 

[0047] Fig. 8 is a flow diagram illustrating the 
operation of user terminal 13 0, system server 110 and target 
Internet site 120 in accordance with a simplified embodiment 
of the present invention. Again, the user (e.g., John Doe) 
receives a smart card 232 programmed during Step 630. Upon 
receiving smart card 232, the user may insert the smart card 
into the smart card socket 215 of set top box 131 (Step 
801) . Again, interrupt switch 214 is actuated by the 
insertion of smart card 232 in socket 215, thereby causing 
CPU 210 to clear previous authorization and channel table 
information stored in SDRAM 218 (Step 802) . 

[0048] CPU 210 then retrieves the customer number 331 and 
the user PIN 332 from smart card 232, and transmits this 
information to system server 110 (Step 8 03) . System server 
110 compares the customer number 331 and user PIN 332 with 
network database 416 (Fig. 5) and determines whether 
customer number 331 and user PIN 332 correspond with a user 
having a "current" status (Step 804) . If system server 110 
determines that the customer number 331 and user pin 332 do 
not match a current record in network database 416, then 
system server 110 transmits customer service information 
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(Step 805) , which is displayed by user terminal 130 (Step 
806) . 

[0049] If system server 110 determines that the customer 
number 331 and user PIN 332 match a current record in 
network database 416, then system server 110 transmits an 
authorization code to user terminal 130 (Step 807) . User 
terminal 130 receives the authorization code, which enables 
CPU 210 to retrieve the target Internet site URL 333 from 
smart card 232 (Step 808) . The target Internet site URL 333 
is written to SDRAM 218, and used by set-top box 131 to 
accesses the target Internet site 120 (Steps 809-810) . In 
response, target Internet site 811 transmits the target 
information to user terminal 130 (Step 811) . User terminal 
130 then displays the target information (i.e., the target 
Internet site content) (Step 812) . In certain embodiments, 
the displayed target information may include additional 
links that may be accessed by the user (Step 813) . 
[0050] The embodiment described by Fig. 8 allows the user 
to access the target Internet site 12 0 from any user 
terminal, as long as the user's account is current. That 
is, the embodiment described by Fig. 8 does not treat a 
guest user any different than a resident user. 
[0051] Although the present invention has been described 
in connection with specific embodiments and examples, it is 
understood that variations to these embodiments and examples 
would be apparent to one of ordinary skill in the art. 
Thus, the invention is limited only by the following claims. 
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